[Mdaemon-L] 550 message does not pass DomainKey Identified Mail (DKIM)

2023-09-19 Terurut Topik Rizky Pakpahan
Selamat pagi Pak Syafril,
Izin bertanya pak, ada case pengirim dari domain berikut (cp.co.id)
email nya tidak berhasil diterima oleh mail server pak.
Mohon bantuannya pak, Terima kasih Pak
-Berikut log SMTP-In
Wed 2023-09-20 10:03:24: 05: [355469] Session 355469; child 0002
Wed 2023-09-20 10:03:24: 05: [355469] Accepting SMTP connection from
[103.215.13.27:35328] to [10.2.1.10:25]
Wed 2023-09-20 10:03:24: 03: [355469] --> 220 mail.makmurgroup.id
ESMTP MDaemon 13.5.1; Wed, 20 Sep 2023 10:03:24 +0700
Wed 2023-09-20 10:03:24: 02: [355469] <-- EHLO mx3.cp.co.id
Wed 2023-09-20 10:03:24: 05: [355469] Performing IP lookup (mx3.cp.co.id)
Wed 2023-09-20 10:03:24: 05: [355469] *  D=mx3.cp.co.id TTL=(15)
A=[103.215.13.27]
Wed 2023-09-20 10:03:24: 05: [355469]  End IP lookup results
Wed 2023-09-20 10:03:24: 01: [355469] EHLO/HELO response delayed 10 seconds
Wed 2023-09-20 10:03:34: 03: [355469] --> 250-mail.makmurgroup.id
Hello mx3.cp.co.id, pleased to meet you
Wed 2023-09-20 10:03:34: 03: [355469] --> 250-ETRN
Wed 2023-09-20 10:03:34: 03: [355469] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Wed 2023-09-20 10:03:34: 03: [355469] --> 250-8BITMIME
Wed 2023-09-20 10:03:34: 03: [355469] --> 250-STARTTLS
Wed 2023-09-20 10:03:34: 03: [355469] --> 250 SIZE
Wed 2023-09-20 10:03:34: 02: [355469] <-- STARTTLS
Wed 2023-09-20 10:03:34: 03: [355469] --> 220 Begin TLS negotiation
Wed 2023-09-20 10:03:35: 01: [355469] SSL negotiation successful (TLS
1.0, 1024 bit key exchange, 128 bit  encryption)
Wed 2023-09-20 10:03:35: 02: [355469] <-- EHLO mx3.cp.co.id
Wed 2023-09-20 10:03:35: 05: [355469] Performing IP lookup (mx3.cp.co.id)
Wed 2023-09-20 10:03:35: 05: [355469] *  D=mx3.cp.co.id TTL=(14)
A=[103.215.13.27]
Wed 2023-09-20 10:03:35: 05: [355469]  End IP lookup results
Wed 2023-09-20 10:03:35: 03: [355469] --> 250-mail.makmurgroup.id
Hello mx3.cp.co.id, pleased to meet you
Wed 2023-09-20 10:03:35: 03: [355469] --> 250-ETRN
Wed 2023-09-20 10:03:35: 03: [355469] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Wed 2023-09-20 10:03:35: 03: [355469] --> 250-8BITMIME
Wed 2023-09-20 10:03:35: 03: [355469] --> 250 SIZE
Wed 2023-09-20 10:03:35: 02: [355469] <-- MAIL
FROM: SIZE=25823 BODY=7BIT
Wed 2023-09-20 10:03:35: 05: [355469] Performing PTR lookup
(27.13.215.103.IN-ADDR.ARPA)
Wed 2023-09-20 10:03:35: 05: [355469] *  D=27.13.215.103.in-addr.arpa
TTL=(15) PTR=[mx3.cp.co.id]
Wed 2023-09-20 10:03:35: 05: [355469] *  Gathering A records...
Wed 2023-09-20 10:03:35: 05: [355469] *  D=mx3.cp.co.id TTL=(14)
A=[103.215.13.27]
Wed 2023-09-20 10:03:35: 05: [355469]  End PTR results
Wed 2023-09-20 10:03:35: 05: [355469] Performing IP lookup (cp.co.id)
Wed 2023-09-20 10:03:35: 05: [355469] *  D=cp.co.id TTL=(15) A=[103.215.13.5]
Wed 2023-09-20 10:03:35: 05: [355469] *  P=010 S=000 D=cp.co.id
TTL=(1) MX=[mx1.cp.co.id]
Wed 2023-09-20 10:03:35: 05: [355469] *  P=020 S=001 D=cp.co.id
TTL=(1) MX=[mx1l.cp.co.id]
Wed 2023-09-20 10:03:35: 05: [355469] *  D=cp.co.id TTL=(15) A=[103.215.13.5]
Wed 2023-09-20 10:03:35: 05: [355469] *  D=cp.co.id TTL=(15) A=[103.215.13.5]
Wed 2023-09-20 10:03:35: 05: [355469]  End IP lookup results
Wed 2023-09-20 10:03:35: 09: [355469] Performing SPF lookup (cp.co.id
/ 103.215.13.27)
Wed 2023-09-20 10:03:35: 09: [355469] *  Policy: v=spf1 mx
ip4:222.124.147.49/32 ip4:103.145.176.16/32 ip4:103.215.13.27/32 -all
Wed 2023-09-20 10:03:35: 09: [355469] *  Evaluating mx: no match
Wed 2023-09-20 10:03:35: 09: [355469] *  Evaluating
ip4:222.124.147.49/32: no match
Wed 2023-09-20 10:03:35: 09: [355469] *  Evaluating
ip4:103.145.176.16/32: no match
Wed 2023-09-20 10:03:35: 09: [355469] *  Evaluating ip4:103.215.13.27/32: match
Wed 2023-09-20 10:03:35: 09: [355469] *  Result: pass
Wed 2023-09-20 10:03:35: 09: [355469]  End SPF results
Wed 2023-09-20 10:03:35: 03: [355469] --> 250 , Sender ok
Wed 2023-09-20 10:03:35: 02: [355469] <-- RCPT
TO:
Wed 2023-09-20 10:03:35: 05: [355469] Performing DNS-BL lookup
(103.215.13.27 - connecting IP)
Wed 2023-09-20 10:03:36: 05: [355469] *  cbl.abuseat.org - passed
Wed 2023-09-20 10:03:37: 05: [355469] *  b.barracudacentral.org - passed
Wed 2023-09-20 10:03:38: 05: [355469] *  zen.spamhaus.org - passed
Wed 2023-09-20 10:03:38: 05: [355469]  End DNS-BL results
Wed 2023-09-20 10:03:38: 03: [355469] --> 250
, Recipient ok
Wed 2023-09-20 10:03:38: 02: [355469] <-- DATA
Wed 2023-09-20 10:03:38: 01: [355469] Creating temp file (SMTP):
d:\mdaemon\queues\temp\md5126209.tmp
Wed 2023-09-20 10:03:38: 03: [355469] --> 354 Enter mail, end with .
Wed 2023-09-20 10:03:38: 01: [355469] Message size: 26125 bytes
Wed 2023-09-20 10:03:38: 08: [355469] Performing VBR certification
(Domain: cp.co.id, Auth: SPF)
Wed 2023-09-20 10:03:38: 08: [355469] *  File:
d:\mdaemon\queues\temp\md5126209.tmp
Wed 2023-09-20 10:03:38: 08: [355469] *  Message-ID: <650a60f9.5000...@cp.co.id>
Wed 2023-09-20 10:03:38: 08: [355469] *  Certifier (trusted):
vbr.emailcertification.org ...
Wed 2023-09-20 10:03:38: 08: [355469] *Querying:

[Mdaemon-L] Socket connection closed by the other side (how rude!)

2023-09-19 Terurut Topik Rizky Pakpahan
> Ini problem SSL handshaking.
>
> Aktifkan SSL Negotiation Failure agar next delivery attempt akan pakai
> koneksi non STARTTLS.
>
> http://mdaemon.dutaint.co.id/mdaemon/23.0.1/default-domain-and-servers_servers.html
>
> [x] SSL negotiation failures will retry without SSL for up to one hour
>
> pilihan lain, masukkan recipient MX domain kedalam No STARTLS list
>
> http://mdaemon.dutaint.co.id/mdaemon/23.0.1/ssl_white-list.html
>
> bpjskesehatan-go-id01b.mail.protection.outlook.com
>
>
Kita coba set No STARTLS list, saat ini belum ada eror lagi.
Terima kasih Pak Syafril
-- 
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3




[Mdaemon-L] 550 5.7.0 Message rejected per DMARC policy

2023-09-19 Terurut Topik Syafril Hermansyah via Mdaemon-L

On 9/19/23 15:24, Dedet Saputra via Mdaemon-L wrote:

Mohon bantuan, Kami tidak bisa menerima email dari @maersk.com




Fri 2023-09-15 16:59:01.649: [77238739] * SPF: domain "maersk.com" did not pass 
SPF check
Fri 2023-09-15 16:59:01.649: [77238739] * DKIM: domain "maersk.com" (from d= of 
signature #1) failed verification
Fri 2023-09-15 16:59:01.649: [77238739] * Action taken: reject
Fri 2023-09-15 16:59:01.649: [77238739] * Result: fail
Fri 2023-09-15 16:59:01.649: [77238739]  End DMARC results
Fri 2023-09-15 16:59:01.649: [77238739] --> 550 5.7.0 Message rejected per 
DMARC policy for maersk.com



Masukkan sender domain maersk.com kedalam SPF exempt list

http://mdaemon.dutaint.co.id/mdaemon/23.0.1/security--spf__sender_id.html
--
syafril

Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 23.5.0 Beta RC1
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

Dalam bisnis, tugas kami yang utama adalah menghasilkan barang/jasa yang 
diterima, membuat mereka lebih sejahtera, dan hidup mereka lebih bahagia 
lagi.

-- Konosuke Matsushita


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3




[Mdaemon-L] email masuk delay

2023-09-19 Terurut Topik Syafril Hermansyah via Mdaemon-L

On 9/19/23 14:08, ir...@mandau.id wrote:

Perlihatkan message header lengkap dari mail yang diterima dari sender itu 
untuk cari tahu apakah message itu delay atau tidaknya.



Received: from mail02.huawei.com (unknown [172.30.67.143])
by dggsgout12.his.huawei.com (SkyGuard) with ESMTP id 4RqS7Z6RlDz4f3l2W;
Tue, 19 Sep 2023 11:38:50 +0800 (CST)
Received: from adc-email-helm-76d56ffc76-7mfml (unknown [159.138.82.255])
by APP4 (Coremail) with SMTP id gCh0CgAHk9LNFwllMG5WAw--.49645S2;
Tue, 19 Sep 2023 11:38:55 +0800 (CST)


Ini email hari ini pak, dikirim 10:39 di terima 12:49 



Kenapa tidak diberikan mail yang Sun 2023-09-17 yl?

Untuk mail ini periksa apakah ada koneksi dari server .huawei.com yang 
time out antara jam 10:39 di terima 12:48.



--
syafril

Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 23.5.0 Beta RC1
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

A leader is a dealer in hope
-- Napoleon Bonaparte


--
--[mdaemon-l]--
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 23.0.2, SecurityGateway 9.0.3




[Mdaemon-L] email masuk delay

2023-09-19 Terurut Topik irwan
> Perlihatkan message header lengkap dari mail yang diterima dari sender itu 
> untuk cari tahu apakah message itu delay atau tidaknya.

X-MDAV-Result: clean
X-MDAV-Processed: mail.mandau.id, Tue, 19 Sep 2023 12:49:12 +0700
Return-path: 
Authentication-Results: mail.mandau.id;
iprev=fail policy.iprev=45.249.212.56 reason="does not match" (MAIL 
huaweipmows...@ms.huawei.com)
Received: from dggsgout12.his.huawei.com [(45.249.212.56)] by mail.mandau.id 
(MDaemon PRO v20.0.4)
with ESMTP id md5001001843160.msg; Tue, 19 Sep 2023 12:49:11 +0700
X-Spam-Level:
X-Spam-Status: No, score=-100.00 required=4.0
X-Spam-Report:
* -0.0 USER_IN_WELCOMELIST User is listed in 'welcomelist_from'
* -0.0 SHORTCIRCUIT Not all rules were run, due to a shortcircuited
*  rule
* -100 USER_IN_WHITELIST From: address is in the whitelist
X-Spam-Processed: mail.mandau.id, Tue, 19 Sep 2023 12:49:11 +0700
(processed during SMTP session)
X-MDRemoteIP: 45.249.212.56
X-MDHelo: dggsgout12.his.huawei.com
X-MDArrival-Date: Tue, 19 Sep 2023 12:49:11 +0700
X-MDArchive-Copy: 1
X-Rcpt-To: shift.lead...@mandau.id
X-MDRcpt-To: shift.lead...@mandau.id
X-Return-Path: huaweipmows...@ms.huawei.com
X-Envelope-From: huaweipmows...@ms.huawei.com
X-MDaemon-Deliver-To: archi...@imprima.id
Received: from mail02.huawei.com (unknown [172.30.67.143])
by dggsgout12.his.huawei.com (SkyGuard) with ESMTP id 4RqS7Z6RlDz4f3l2W;
Tue, 19 Sep 2023 11:38:50 +0800 (CST)
Received: from adc-email-helm-76d56ffc76-7mfml (unknown [159.138.82.255])
by APP4 (Coremail) with SMTP id gCh0CgAHk9LNFwllMG5WAw--.49645S2;
Tue, 19 Sep 2023 11:38:55 +0800 (CST)
Date: Tue, 19 Sep 2023 03:38:53 + (GMT)
From: huaweipmows...@ms.huawei.com
To: shift.lead...@mandau.id, hdjabo.i...@mandau.id, hdsum.i...@mandau.id,
arfan.d...@mandau.id, helpdesk@mandau.id, helpdesk@mandau.id,
helpdesk@mandau.id, helpd...@mandau.id,
arief.suryo.wid...@huawei.com, deri.hendriya...@huawei.com,
mshfo.transmiss...@ioh.co.id, andrew.tos...@huawei.com,
denny.nugraha@huawei.com, joedyatnowo.wiratmodj...@huawei.com,
iputu.smratnata...@huawei.com, andreas.lafia...@huawei.com,
coshiftmana...@huawei.com, mshfo.datac...@ioh.co.id,
eko.budi...@huawei.com, rizal.fauji...@huawei.com,
heng.jun.ro...@huawei.com, hendriano.febriansyah...@huawei.com,
mohamad.azhar@huawei.com, anon.s...@huawei.com,
nanda.ari@huawei.com
Message-ID: <1836811128.523020.1695094733134@adc-email-helm-76d56ffc76-7mfml>
Subject: 
=?UTF-8?B?W0ZMUF8zcmRfTWFuZGF1XSBUcm91YmxlIFRpY2tldCBPcGVuIC0gTWFqb3IgLSAxMVJLQjAxMDkoMDJSS0IwMTUpPD4xMkpLUDAyMTAoMDFKS1AyMTgpIC0gRE9XTiAtIEZMUC1JTkMtMjAyMzA5MTktMDAwMDcxNTA=?=
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_Part_523018_412797681.1695094733133"
X-CM-TRANSID:gCh0CgAHk9LNFwllMG5WAw--.49645S2
X-Coremail-Antispam: 1UD129KBjvJXoWxCrWktw1fCFy8Jr4UKr4rXwb_yoW5tr43pF
ykJw18tFW8t39FvrWIya4rKFn8Gayay3yfXw18Zr92vF45JFnxu3ZxZrs0v3yjy3ykCw17
tFWvvF4qgw1j9r7anT9S1TB71UUqnTZGkaVYY2UrjbIjqfuFe4nvWSU5nxnvy2
9KBjDU0xBIdaVrnRJUUjjCb4IE77IF4wAFF20E14v26ryj6rWUM7CY07I20VC2zVCF04k2
6cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1Y6r17M28lY4IEw2IIxxk0rwA2F7IY1VAKz4
vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_tr0E3s1l84ACjcxK6xIIjxv20xvEc7Cj
xVAFwI0_GcCE3s1l84ACjcxK6I8E87Iv67AKxVW0oVCq3wA2z4x0Y4vEx4A2jsIEc7CjxV
AFwI0_GcCE3s1lnx0E84ACjcxK6xIIjxv20xvEc7CjxVAFwI0_GcCE3s0E84ACjcxK6xII
jxv20xvE14v26w1j6s0q64xvF2IE5I8CrVAEw40kM2vj628EF7xvwVC0I7IYx2IY6xkF7I
0E14v26rxl6s0q628EF7xvwVC0I7IYx2IY67AKxVWDJVCq3VCjxxvEa2IrM2vj628EF7xv
wVC0I7IYx2IY6xkF7I0E14v26rxl6s0q628EF7xvwVC2z280aVAFwI0_GcCE3s0E7I0Y6s
xI4wAa7VA2z4x0Y4vE2Ix0cI8IcVCY1x0267AKxVW0oVCq3VACY4xI6c02F40Ez4kGawAa
7VA2z4x0Y4vE2Ix0cI8IcVCY1x0267AKxVW0oVCq3VCjxxvEa2IrM2AIxVAIcxkEcVAq07
x20xvEncxIr21l5I8CrVAYj202j2C_Jr0_Gr1l5I8CrVACY4xI64kE6c02F40Ex7xfMc02
F40Ew4AK048IF2xKxVWrJVW7JwAv7VC0I7IYx2IY67AKxVW8Xw0E3s1lYx0Ec7CjxVAajc
xG14v26r4j6F4UMcIj6I8E87Iv67AKxVW7JcCE3s0DMcvjeVCFs4IE7xkEbVWUJVW8JwAC
jcxG0xvEwIxGrwACjcxG6xCI17CEII8vrVW3JVW8Jr1lFcxC0VAqx4xG64AKrs4lFIxGxc
IEc7CjxVA2Y2ka0xkIwI1lw4CE7480Y4vE14AKx2xKxVC2ax8xM4kE6xkIj40Ew7xC0wCY
1x026xCI17CEII8vrVWkCVWkKwCY02Avz4vEIxC_Gr4l42xK82IYc2Ij64vIr41l4I8I3I
0E4IkC6x0Yz7v_Jr0_Gr1l4IxYO2xFxVAFwI0_JF0_Jw1lx2IqxVAqx4xG67AKxVWUGVWU
WwC20s026x8GjcxK67AKxVWUJVWUGwC2zVAF1VAY17CE14v26r4a6rW5MIIYrxkI7VAKI4
8JMIIF0xvE2Ix0cI8IcVAFwI0_tr0E3s1lIxAIcVC0I7IYx2IY6xkF7I0E14v26rxl6s0D
MIIF0xvE42xK8VAvwI8IcIk0rVWUJVWUCwCI42IY6I8E87Iv67AKxVW0oVCq3wCI42IY6I
8E87Iv6xkF7I0E14v26rxl6s0DYxBIdaVFxhVjvjDU0xZFpf9x07bSF4iU=
X-CM-SenderInfo: 5kxd4v5lsp04lvktxqtpvox3pdzhxhhfrp/
X-CFilter-Loop: Reflected


Ini email hari ini pak, dikirim 10:39 di terima 12:49

Mohon bantuannya